I can add an attachment as sysadmin but as a regular user - the attachment add / remove are both greyed out. Is there a security setting around attachments?

Also getting a error message of on another page:
javax.faces.FacesException: Valid containerID has not been specified
at com.webMethods.caf.faces.data.attachments.BasePortalContainerAttachmentsProvider.addAttachment(BasePortalContainerAttachmentsProvider.java:132)
at com.webMethods.caf.faces.component.attachments.view.AttachmentsPage.addAttachmentsButton_action(AttachmentsPage.java:302)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.sun.faces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:126)
at com.webMethods.caf.faces.application.CAFMethodBinding.invoke(CAFMethodBinding.java:67)
at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:72)
at javax.faces.component.UICommand.broadcast(UICommand.java:312)
at com.webMethods.caf.faces.component.ViewRoot.broadcastEvents(ViewRoot.java:202)